artif: collect coredump files

Add new artifacts to collect coredump files.
The coredump files themselves may not directly help in analyzing incidents, but they are useful for building a timeline of the command execution history.

artifacts/files/system/coredump.yaml

@@ -0,0 +1,29 @@
+version: 1.0
+artifacts:
+  -
+    description: Collect core dump files.
+    supported_os: [aix, esxi, freebsd, linux, netbsd, openbsd, solaris]
+    collector: file
+    path: /
+    name_pattern: ["core", "core.*", "*.core"]
+    file_type: [f]
+  -
+    description: Collect ABRT files.
+    supported_os: [linux]
+    collector: file
+    path: /var/spool/abrt
+  -
+    description: Collect ABRT files.
+    supported_os: [linux]
+    collector: file
+    path: /var/spool/abrt-upload
+  -
+    description: Collect ABRT files.
+    supported_os: [linux]
+    collector: file
+    path: /var/tmp/abrt
+  -
+    description: Collect Apport or kdump files.
+    supported_os: [linux]
+    collector: file
+    path: /var/crash

artifacts/live_response/system/coredump.yaml

@@ -0,0 +1,31 @@
+version: 1.0
+output_directory: /live_response/system
+artifacts:
+  -
+    description: Display the coredump file name pattern.
+    supported_os: [linux]
+    collector: command
+    command: cat /proc/sys/kernel/core_pattern
+    output_file: core_pattern.txt
+  -
+    description: List all coredump files.
+    supported_os: [linux]
+    collector: command
+    condition: command_exists "coredumpctl"
+    command: coredumpctl list
+    output_file: coredumpctl_list.txt
+  -
+    description: Display info of all coredump files.
+    supported_os: [linux]
+    collector: command
+    condition: command_exists "coredumpctl"
+    foreach: coredumpctl list --no-legend | awk '{print $5}'
+    command: coredumpctl info %line%
+    output_file: coredumpctl_info_%line%.txt
+  -
+    description: Get extended attributes of all coredump files.
+    supported_os: [linux]
+    collector: command
+    condition: command_exists "getfattr"
+    command: getfattr -R -d --absolute-names /var/lib/systemd/coredump
+    output_file: getfattr_coredump.txt

artifacts/live_response/system/ulimit.yaml

@@ -0,0 +1,10 @@
+version: 1.0
+output_directory: /live_response/system
+artifacts:
+  -
+    description: Display all resource limits.
+    supported_os: [aix, esxi, freebsd, linux, netbsd, openbsd, solaris]
+    collector: command
+    condition: command_exists "ulimit"
+    command: ulimit -a
+    output_file: ulimit.txt